From owner-freebsd-ipfw@FreeBSD.ORG Tue Jul 5 18:46:07 2011 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9A913106566B for ; Tue, 5 Jul 2011 18:46:07 +0000 (UTC) (envelope-from fabian@wenks.ch) Received: from batman.home4u.ch (batman.home4u.ch [IPv6:2001:8a8:1005:1::2]) by mx1.freebsd.org (Postfix) with ESMTP id 36B378FC08 for ; Tue, 5 Jul 2011 18:46:06 +0000 (UTC) X-Virus-Scanned: amavisd-new at home4u.ch Received: from flashback.wenks.ch (fabian@flashback.wenks.ch [62.12.173.4]) (authenticated bits=0) by batman.home4u.ch (8.14.4/8.14.4) with ESMTP id p65Ik4FE047588 (version=TLSv1/SSLv3 cipher=DHE-RSA-CAMELLIA256-SHA bits=256 verify=NO) for ; Tue, 5 Jul 2011 20:46:05 +0200 (CEST) (envelope-from fabian@wenks.ch) Message-ID: <4E135BEC.80708@wenks.ch> Date: Tue, 05 Jul 2011 20:46:04 +0200 From: Fabian Wenk User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.18) Gecko/20110616 Thunderbird/3.1.11 MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org References: <1309890156.56237.YahooMailClassic@web160113.mail.bf1.yahoo.com> In-Reply-To: <1309890156.56237.YahooMailClassic@web160113.mail.bf1.yahoo.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: ipfw fwd on FreeBSD 8.1, does it work? X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd-ipfw@freebsd.org List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Jul 2011 18:46:07 -0000 Hello Unga On 05.07.2011 20:22, Unga wrote: > --- On Wed, 7/6/11, Andrey V. Elsukov wrote: >> You should add 'options IPFIREWALL' in the your kernel >> config too. > ipfw(8) man page for 'fwd' shows to add only the IPFIREWALL_FORWARD. I guess the manpage implies that 'options IPFIREWALL' is already there, or the module is loaded, can be done with: kldload ipfw So you do not need to rebuild the kernel. bye Fabian